Parsing xml message inside json file


I am getting an error while filtering a json file. Previously, I was using filebeat to send data directly to logstash, but now I am using kafka between filebeat and logstash. So the output is not the same:

Previously, the input of my logstash was a part of an xml.


And now I am getting a json file:

inside this json file, I can find the part of xml I was using before (message in yellow)

How can I change this part of my logstash to will be able to filter the xml file like I was doing before.

the first part of my filter was:

I tried to use something like that but I am getting errors:

Thank you for your help

What error are you getting? Also, please do not post pictures of text, just post the text.

I am getting this error:

[WARN ][logstash.filters.split   ] Only String and Array types are splittable. field:[theXML][measType] is of type = NilClass

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.